3 ms·

Google Compute Engine has had this functionality for years (at least the browser based SSH). Furthermore, Google's free Cloud Shell feature is fantastic. Over

Google Compute Engine has had this functionality for years (at least the browser based SSH). Furthermore, Google's free Cloud Shell feature is fantastic. Over the years, AWS has put their focus entirely on "Enterprise" customer functionality as opposed to "developer friendly" capabilities.

peteretep 7y ago
And that’s why I’m willing to give them my money. Google’s cloud offering needs to be considered a hobby like all their non-search activity
- jmb12686 7y ago
  Fair enough, I agree Enterprise workloads are better off relying on Enterprise class products.
- heybrendan 7y ago
  Huh? A hobby? Transcript from Alphabet Q1 2019 Earnings Call; April 29, 2019 [1] > Sundar Pichai, CEO Google: > We are also deeply committed to becoming the most customer-centric cloud provider for enterprise customers, and making it easier for companies to do business with us thanks to new contracting, pricing, and more. Today, 9 of the world's 10 largest media companies, 7 of the 10 largest retailers, and more than half of the 10 largest companies in manufacturing, financial services, communications, and software use Google Cloud. > Some of the companies that we announced at Next included: The American Cancer Society and McKesson in Healthcare; Media and Entertainment companies like USA Today and Viacom; Consumer Packaged Goods brands like Unilever; Manufacturing and Industrial companies like Samsung and UPS; and Public Sector organizations like Australia Post. > Finally, to support our customers' growth, we also announced the addition of two new Cloud regions in Seoul and Salt Lake City, which we plan to open in 2020. These new Cloud regions will build on our current footprint of 19 Cloud regions and 58 data centers around the world. This doesn't seem like just a hobby to Google. [1] https://abc.xyz/investor/static/pdf/2019_Q1_Earnings_Transcript.pdf https://abc.xyz/investor/static/pdf/2019_Q1_Earnings_Transcr...
  - peteretep 7y ago
    Meh, I care about actions and not random words
    - 9nGQluzmnq3M 7y ago
      > our current footprint of 19 Cloud regions and 58 data centers around the world Do you understand how expensive this action is?
      - toast0 7y ago
        How many of those data centers were already there for their advertising business?
  - apsdsm 7y ago
    To be fair, given their history of shutting things down, it’s easy to see anything that isn’t selling ads as a hobby for google. Even if that’s not the case, it can be hard to shake that gut-level feeling. I suspect that’ll be the hardest thing for most people to get over when considering a google stack.
- cwp 7y ago
  Every now and then I consider using GCP for a new project, because their tech is obviously better. I never do though, because every time, I stumble across somebody with a horror story. You know how it goes. They built their business on Google's platform, and it was a dream until some AI detected a pattern of activity it didn't like and they were excommunicated. The app was shut down, the website stopped getting traffic, and all they money they had charged customers via Google Pay was frozen. No appeals, emails go to /dev/null and after a month of campaigning on social media they finally get an email from an intern saying that after review, they won't be changing the automated decision. No thanks.
- izacus 7y ago
  Last I checked, Cloud is pretty much the only other thing besides Ads that makes any money at Google :)
akhilcacharya 7y ago
EC2 has had browser SSH for ages too! They're just improving it. https://docs.aws.amazon.com/quickstarts/latest/vmlaunch/step-2-connect-to-instance.html#browser https://docs.aws.amazon.com/quickstarts/latest/vmlaunch/step... (But..yeah, at a time it was an applet)
procrastitron 7y ago
It’s not just the browser based SSH that GCE has had for years. The way they describe tying SSH keys to IAM roles very closely matches the SSH key management that GCE had when it launched back in 2012.
drewda 7y ago
Yes, I quite like this functionality in the "gcloud" CLI: https://cloud.google.com/sdk/gcloud/reference/compute/ssh https://cloud.google.com/sdk/gcloud/reference/compute/ssh FWIW, it sounds like one advantage of the new AWS service is that it will provision a new SSH key each time you connect. Whereas, I _think_ the GCP one provisions one key per machine.
- jkaplowitz 7y ago
  Google's browser-based method uses a new key each time, set to expire from the server-side authorized_keys file in a short time (minutes). I strongly suspect, but haven't checked, that this is also true for their Cloud Console mobile app's SSH feature. You're mostly right about gcloud, with some nuances for multi-user or network-homedir environments among other exceptions. Gcloud does however have one of the snazziest possible hacks for resetting and securely communicating Windows account passwords: https://cloud.google.com/compute/docs/instances/windows/automate-pw-generation https://cloud.google.com/compute/docs/instances/windows/auto...
choppaface 7y ago
gcloud has had it, but as of at least a month ago there are terrible races. You can create a machine, log in with normal ssh, log in with cloud shell, and then the next normal ssh login will fail because cloud shell will modify the machine’s ssh keys. I once found a race in the UI, reported it with complete repro instructions, and then Google made me have to do a 30 minute hangout meeting where I had to repro the bug in front of the Google engineer. The call resulted in two different tickets... we found another bug. So gcloud might have some nicer features, but the engineees building the web app seem to have some basic misunderstandings about concurrency. The BigQuery UI (new one not the old one) is similarly riddled with bugs.
- EugeneOZ 7y ago
  I experienced this bug also and it was quite surprising how the idea of overwriting authorized_keys file could pass sanity filters. It's really wild.
  - sieabahlpark 7y ago
    Makes sense when you consider the people who get jobs at Google only know how to solve Leetcode problems.

peteretep 7y ago

And that’s why I’m willing to give them my money. Google’s cloud offering needs to be considered a hobby like all their non-search activity

jmb12686 7y ago
Fair enough, I agree Enterprise workloads are better off relying on Enterprise class products.
heybrendan 7y ago
Huh? A hobby? Transcript from Alphabet Q1 2019 Earnings Call; April 29, 2019 [1] > Sundar Pichai, CEO Google: > We are also deeply committed to becoming the most customer-centric cloud provider for enterprise customers, and making it easier for companies to do business with us thanks to new contracting, pricing, and more. Today, 9 of the world's 10 largest media companies, 7 of the 10 largest retailers, and more than half of the 10 largest companies in manufacturing, financial services, communications, and software use Google Cloud. > Some of the companies that we announced at Next included: The American Cancer Society and McKesson in Healthcare; Media and Entertainment companies like USA Today and Viacom; Consumer Packaged Goods brands like Unilever; Manufacturing and Industrial companies like Samsung and UPS; and Public Sector organizations like Australia Post. > Finally, to support our customers' growth, we also announced the addition of two new Cloud regions in Seoul and Salt Lake City, which we plan to open in 2020. These new Cloud regions will build on our current footprint of 19 Cloud regions and 58 data centers around the world. This doesn't seem like just a hobby to Google. [1] https://abc.xyz/investor/static/pdf/2019_Q1_Earnings_Transcript.pdf https://abc.xyz/investor/static/pdf/2019_Q1_Earnings_Transcr...
- peteretep 7y ago
  Meh, I care about actions and not random words
  - 9nGQluzmnq3M 7y ago
    > our current footprint of 19 Cloud regions and 58 data centers around the world Do you understand how expensive this action is?
    - toast0 7y ago
      How many of those data centers were already there for their advertising business?
- apsdsm 7y ago
  To be fair, given their history of shutting things down, it’s easy to see anything that isn’t selling ads as a hobby for google. Even if that’s not the case, it can be hard to shake that gut-level feeling. I suspect that’ll be the hardest thing for most people to get over when considering a google stack.
cwp 7y ago
Every now and then I consider using GCP for a new project, because their tech is obviously better. I never do though, because every time, I stumble across somebody with a horror story. You know how it goes. They built their business on Google's platform, and it was a dream until some AI detected a pattern of activity it didn't like and they were excommunicated. The app was shut down, the website stopped getting traffic, and all they money they had charged customers via Google Pay was frozen. No appeals, emails go to /dev/null and after a month of campaigning on social media they finally get an email from an intern saying that after review, they won't be changing the automated decision. No thanks.
izacus 7y ago
Last I checked, Cloud is pretty much the only other thing besides Ads that makes any money at Google :)

akhilcacharya 7y ago

EC2 has had browser SSH for ages too! They're just improving it. https://docs.aws.amazon.com/quickstarts/latest/vmlaunch/step-2-connect-to-instance.html#browser https://docs.aws.amazon.com/quickstarts/latest/vmlaunch/step... (But..yeah, at a time it was an applet)

procrastitron 7y ago

It’s not just the browser based SSH that GCE has had for years. The way they describe tying SSH keys to IAM roles very closely matches the SSH key management that GCE had when it launched back in 2012.

drewda 7y ago

Yes, I quite like this functionality in the "gcloud" CLI: https://cloud.google.com/sdk/gcloud/reference/compute/ssh https://cloud.google.com/sdk/gcloud/reference/compute/ssh FWIW, it sounds like one advantage of the new AWS service is that it will provision a new SSH key each time you connect. Whereas, I _think_ the GCP one provisions one key per machine.

jkaplowitz 7y ago
Google's browser-based method uses a new key each time, set to expire from the server-side authorized_keys file in a short time (minutes). I strongly suspect, but haven't checked, that this is also true for their Cloud Console mobile app's SSH feature. You're mostly right about gcloud, with some nuances for multi-user or network-homedir environments among other exceptions. Gcloud does however have one of the snazziest possible hacks for resetting and securely communicating Windows account passwords: https://cloud.google.com/compute/docs/instances/windows/automate-pw-generation https://cloud.google.com/compute/docs/instances/windows/auto...

choppaface 7y ago

gcloud has had it, but as of at least a month ago there are terrible races. You can create a machine, log in with normal ssh, log in with cloud shell, and then the next normal ssh login will fail because cloud shell will modify the machine’s ssh keys. I once found a race in the UI, reported it with complete repro instructions, and then Google made me have to do a 30 minute hangout meeting where I had to repro the bug in front of the Google engineer. The call resulted in two different tickets... we found another bug. So gcloud might have some nicer features, but the engineees building the web app seem to have some basic misunderstandings about concurrency. The BigQuery UI (new one not the old one) is similarly riddled with bugs.

EugeneOZ 7y ago
I experienced this bug also and it was quite surprising how the idea of overwriting authorized_keys file could pass sanity filters. It's really wild.
- sieabahlpark 7y ago
  Makes sense when you consider the people who get jobs at Google only know how to solve Leetcode problems.